Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a663030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a663030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          xPpM1iXrAXsVXBgPl9CKaiKJeyX1Yb0gVrFA6HoHXag=
Subject key identifier:   21:CC:85:84:61:D4:BC:98:A0:0B:97:A5:14:F8:8D:A0:E5:A5:FB:3A
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       221CFD0C2C7243687224FB892E2636B29EC8321E
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a663030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Thu 04 Apr 2024 00:50:42 +0000
ROA not before:           Thu 04 Apr 2024 00:45:42 +0000
ROA not after:            Thu 03 Apr 2025 00:50:42 +0000
asID:                     61637
IP address blocks:        2804:1c18:f000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1c:fd:0c:2c:72:43:68:72:24:fb:89:2e:26:36:b2:9e:c8:32:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Apr  4 00:45:42 2024 GMT
            Not After : Apr  3 00:50:42 2025 GMT
        Subject: CN=21CC858461D4BC98A00B97A514F88DA0E5A5FB3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7e:cc:35:fe:d6:68:d3:5f:3c:50:b2:28:a9:
                    6e:e9:0d:0a:16:3c:cf:b0:21:ab:91:c0:94:7a:d8:
                    73:cd:53:bc:82:ae:8f:5b:5e:5f:6e:6c:fc:75:6b:
                    0f:13:33:89:80:13:6b:38:22:e6:d7:1a:81:19:37:
                    3a:2c:e7:d5:90:0e:47:f8:5f:e4:bd:dd:6a:0e:c4:
                    1b:c8:50:33:50:0d:45:81:c3:41:29:eb:5c:0f:ba:
                    56:90:20:f7:2e:95:96:b2:47:b7:50:9f:2d:a4:03:
                    cb:df:a4:6a:38:6c:bc:85:d5:cc:d4:d8:bb:67:e5:
                    62:8d:33:b6:13:1b:d0:5e:e1:f3:53:b6:56:c1:6c:
                    ea:0c:26:07:bd:45:28:ea:14:46:19:d1:90:25:b3:
                    87:28:b5:75:08:3c:2e:35:05:bf:52:79:11:37:51:
                    66:45:f7:72:b2:56:65:f2:61:be:16:c4:2f:f8:35:
                    9d:e0:d2:06:20:fc:46:8d:0e:33:57:0f:28:7d:bc:
                    25:91:a6:42:c4:96:c8:a2:03:73:7b:a4:1b:f7:7b:
                    69:23:a6:70:49:78:77:89:5a:a9:10:92:2b:17:b3:
                    d2:1e:97:5d:fb:c2:20:3f:ad:01:77:4d:ac:ea:e8:
                    ad:6d:c2:df:c4:9f:de:85:db:56:a8:51:17:87:33:
                    55:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CC:85:84:61:D4:BC:98:A0:0B:97:A5:14:F8:8D:A0:E5:A5:FB:3A
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a663030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2e:98:3d:21:e4:10:56:3e:b0:9a:15:30:04:2b:8d:61:c0:45:
         89:52:c7:58:31:27:5c:f3:00:94:8d:17:3b:64:fa:fc:6f:c3:
         45:89:c1:7e:a8:3d:2f:64:15:55:4c:90:2d:53:d5:5a:69:8d:
         4c:0b:1a:84:1d:2a:2f:78:39:bc:2f:08:78:b7:1a:8b:43:7b:
         b1:d9:4d:52:21:59:b9:7d:e1:a5:25:9f:6b:6f:fc:7c:c5:ad:
         e6:25:bb:c6:c6:a1:7a:77:a0:5a:90:03:8e:35:4c:40:98:a3:
         1b:e6:cd:7f:9c:98:e2:05:0a:c8:4c:81:0f:fb:3f:7f:dc:11:
         e7:b6:9b:6a:1f:de:dd:c3:4a:77:42:f5:79:bd:df:e2:5d:2b:
         12:06:9c:3b:b1:ed:87:ce:79:ad:da:1f:91:ca:f2:0f:da:c4:
         50:13:56:52:9c:89:a2:ab:7c:1d:a4:34:64:de:6a:dc:d2:db:
         f0:2f:b4:f0:3d:b1:2c:0c:b2:9b:15:a2:dd:e0:0a:71:2e:e5:
         39:01:ae:30:6b:f3:0c:58:a6:05:ab:c6:b3:f9:74:3c:a1:ec:
         ca:70:e7:e4:ef:e4:57:77:cb:0c:97:c0:64:5b:d0:06:86:4a:
         12:06:80:af:0a:1b:e2:52:70:4f:07:09:b6:f5:11:7f:f2:b7:
         eb:1a:89:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIhz9DCxyQ2hyJPuJLiY2sp7IMh4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5RkJBRTVCRjYyMDBGNjBFRjA5Q0RCQzFCOTAwNTBB
N0MwNUUwQTAeFw0yNDA0MDQwMDQ1NDJaFw0yNTA0MDMwMDUwNDJaMDMxMTAvBgNV
BAMTKDIxQ0M4NTg0NjFENEJDOThBMDBCOTdBNTE0Rjg4REEwRTVBNUZCM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0fsw1/tZo0188ULIoqW7pDQoW
PM+wIauRwJR62HPNU7yCro9bXl9ubPx1aw8TM4mAE2s4IubXGoEZNzos59WQDkf4
X+S93WoOxBvIUDNQDUWBw0Ep61wPulaQIPculZayR7dQny2kA8vfpGo4bLyF1czU
2Ltn5WKNM7YTG9Be4fNTtlbBbOoMJge9RSjqFEYZ0ZAls4cotXUIPC41Bb9SeRE3
UWZF93KyVmXyYb4WxC/4NZ3g0gYg/EaNDjNXDyh9vCWRpkLElsiiA3N7pBv3e2kj
pnBJeHeJWqkQkisXs9Iel137wiA/rQF3Tazq6K1twt/En96F21aoUReHM1V/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUIcyFhGHUvJigC5elFPiNoOWl+zowHwYDVR0j
BBgwFoAUMZ+65b9iAPYO8JzbwbkAUKfAXgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXNTcmY3cGZYTVA3c0Z6M3FSYzY2Y2FkUFp0SFVWd014RGlQazR2eGFk
ckYvMS8zMTlGQkFFNUJGNjIwMEY2MEVGMDlDREJDMUI5MDA1MEE3QzA1RTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxOUZCQUU1QkY2MjAwRjYw
RUYwOUNEQkMxQjkwMDUwQTdDMDVFMEEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlzU3JmN3BmWE1QN3NGejNxUmM2NmNhZFBadEhVVndNeERpUGs0dnhhZHJGLzEv
MzIzODMwMzQzYTMxNjMzMTM4M2E2NjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDM2MzEzNjMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBBwY8DANBgkqhkiG9w0BAQsFAAOC
AQEALpg9IeQQVj6wmhUwBCuNYcBFiVLHWDEnXPMAlI0XO2T6/G/DRYnBfqg9L2QV
VUyQLVPVWmmNTAsahB0qL3g5vC8IeLcai0N7sdlNUiFZuX3hpSWfa2/8fMWt5iW7
xsahenegWpADjjVMQJijG+bNf5yY4gUKyEyBD/s/f9wR57abah/e3cNKd0L1eb3f
4l0rEgacO7Hth855rdofkcryD9rEUBNWUpyJoqt8HaQ0ZN5q3NLb8C+08D2xLAyy
mxWi3eAKcS7lOQGuMGvzDFimBavGs/l0PKHsynDn5O/kV3fLDJfAZFvQBoZKEgaA
rwob4lJwTwcJtvURf/K36xqJmg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org